On a SBS 2011 Server, I've enabled the Object Access Audit File System Success.
When checking the logs I see mostly read attributes activity.
Reading attributes seems to cloud the logs.
How can this be configured to capture only deletions, creations and updates?